fix(docs): remove malicious polyfill.io script reference#693
Conversation
The polyfill.io domain was sold in 2024 and now serves malware as part of a supply-chain attack. Visitors to the docs were shown a suspicious login prompt originating from https://polyfill.io. The script only existed to backfill ES6 features in legacy browsers (IE11) and is unnecessary for any modern browser, so it is removed without replacement. The already-deployed gh-pages HTML (all versions) was scrubbed directly in gh-pages commit a4e2663. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: defaults Review profile: CHILL Plan: Pro Run ID: 📒 Files selected for processing (1)
💤 Files with no reviewable changes (1)
📝 WalkthroughWalkthroughThe ChangesPolyfill configuration cleanup
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
Problem
The docs embed
https://polyfill.io/v3/polyfill.min.js?features=es6(an old MkDocs-Material/MathJax recipe). The polyfill.io domain was sold in 2024 and now serves malware as part of a supply-chain attack. Visitors to the docs were shown a suspicious login prompt originating fromhttps://polyfill.io:The script only existed to backfill ES6 features for legacy browsers (IE11) and is unnecessary today, so it is removed without replacement.
Changes
polyfill.ioentry fromextra_javascriptinmkdocs.yml→ fixes all future doc buildsAlready done out-of-band
The script tag was baked into 4,530 deployed HTML files across all doc versions (2.0.0–6.1.4) on
gh-pages. Those were scrubbed directly and pushed in gh-pages commita4e2663e— the live site is already clean.🤖 Generated with Claude Code
Summary by CodeRabbit